Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.cer (raw, json)
Hash identifier:          9viveBtO2T/x6Hkk9qOHzX0Vh4Kl2fX57dqGjuG6Bfk=
Subject key identifier:   85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       288C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:31:59 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37324
                          AS: 327821
                          IP: 196.49.9.0/24
                          IP: 196.223.0.0/24
                          IP: 2001:43f8:270::/47

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10380 (0x288c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:31:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:ea:84:ef:62:11:88:89:b1:4c:05:a1:4d:
                    ef:de:05:c9:8d:9f:a1:1e:ad:f7:14:17:01:0c:6b:
                    f8:5d:0b:fb:09:6b:b3:5e:33:d1:21:dd:1b:34:5a:
                    b0:54:45:4a:39:1e:63:ca:55:26:0e:6a:55:49:e4:
                    50:7b:70:10:93:9c:47:e1:60:4b:91:56:22:81:3c:
                    b4:6e:09:7d:f7:50:f3:08:2c:62:02:bb:28:0c:eb:
                    b7:76:4f:5f:af:f1:6b:46:42:de:fb:91:a2:04:5a:
                    5e:cd:ab:4f:f9:d2:01:84:f4:27:db:a2:93:09:9e:
                    04:ef:13:73:fc:a3:d9:e0:45:7c:95:d2:2c:aa:ee:
                    98:5a:84:b3:d7:3f:11:94:61:8b:be:72:4f:f9:fc:
                    f3:77:d1:4b:aa:48:1b:57:cc:8d:83:6e:c7:7b:65:
                    c0:11:d0:4a:92:87:64:a0:7a:a9:3f:f4:74:6b:c0:
                    f4:dc:04:6c:59:fd:f6:d6:a5:c7:b7:27:e6:db:3d:
                    2f:71:31:3d:56:97:60:53:9d:66:9b:16:d3:6d:eb:
                    7a:d3:ad:5d:38:fe:29:f1:05:64:bf:aa:14:0b:31:
                    5e:0f:58:48:21:47:e6:d0:3a:63:3e:c5:2e:f7:77:
                    e3:d7:2d:44:fb:3d:40:ca:53:2b:84:29:29:06:d6:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37324
                  327821

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.9.0/24
                  196.223.0.0/24
                IPv6:
                  2001:43f8:270::/47

    Signature Algorithm: sha256WithRSAEncryption
         20:0b:d0:24:76:11:fa:2b:76:d7:c4:4c:78:1e:ef:76:96:60:
         44:06:7d:e0:aa:58:ea:3d:bf:69:be:a8:ad:0f:9f:25:f9:27:
         e7:b0:6a:91:86:b1:fb:4d:52:e6:8d:d2:6d:72:5d:f6:12:97:
         d3:eb:75:ca:dd:90:25:65:6c:29:14:71:2a:43:a6:3b:01:aa:
         aa:4c:a8:5e:6c:18:30:b2:9c:b6:28:79:8f:fd:e4:c5:59:03:
         7f:72:84:e9:fc:1b:8e:df:6e:e8:6b:8c:49:1b:43:4d:9c:b1:
         86:d8:b9:8f:e5:b9:23:73:ae:c0:56:73:ae:fa:fe:8f:1c:8f:
         ac:6e:f2:61:4e:80:ab:ca:68:5a:24:a4:14:8d:9e:5b:41:b1:
         6e:50:76:ba:c4:f3:ca:bd:f9:7d:74:33:bf:3c:7a:3f:52:05:
         dd:50:95:e8:20:fd:a0:ef:41:9b:84:a4:61:b7:81:5d:dd:b1:
         44:d8:b3:c0:7b:d8:87:38:7b:c6:3a:8e:1f:8e:71:0d:ba:48:
         26:33:09:58:d4:3d:81:43:7f:79:92:c1:d2:ef:55:71:02:84:
         ec:00:ee:20:0d:a4:b7:16:ca:99:94:7e:3a:ba:00:f2:34:f1:
         28:ca:6c:c5:fb:6a:7f:45:5c:5d:b0:3a:11:ae:9d:e9:ae:da:
         5e:1e:d4:de
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgICKIwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDMxNTlaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY1MTczQUYxMTAvBgNVBAUTKDg1QTk1QUREMkNGNTg3NzQwMzBCNkE5
QjkzQjQxMTM4NkZFMzA2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCayeqE72IRiImxTAWhTe/eBcmNn6EerfcUFwEMa/hdC/sJa7NeM9Eh3Rs0WrBU
RUo5HmPKVSYOalVJ5FB7cBCTnEfhYEuRViKBPLRuCX33UPMILGICuygM67d2T1+v
8WtGQt77kaIEWl7Nq0/50gGE9CfbopMJngTvE3P8o9ngRXyV0iyq7phahLPXPxGU
YYu+ck/5/PN30UuqSBtXzI2Dbsd7ZcAR0EqSh2Sgeqk/9HRrwPTcBGxZ/fbWpce3
J+bbPS9xMT1Wl2BTnWabFtNt63rTrV04/inxBWS/qhQLMV4PWEghR+bQOmM+xS73
d+PXLUT7PUDKUyuEKSkG1gANAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUhala3Sz1
h3QDC2qbk7QROG/jBkAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNTE3My9DNjE5NEZEQzg2MUQx
MUVBQkFDRTVGMjhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjUxNzMvQzYxOTRGREM4NjFEMTFFQUJBQ0U1RjI4RjhBRUEyMjgvaGFsYTNT
ejFoM1FEQzJxYms3UVJPR19qQmtBLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAkcwCAwUAjTA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxCQMEAMTf
ADAPBAIAAjAJAwcBIAFD+AJwMA0GCSqGSIb3DQEBCwUAA4IBAQAgC9AkdhH6K3bX
xEx4Hu92lmBEBn3gqljqPb9pvqitD58l+SfnsGqRhrH7TVLmjdJtcl32EpfT63XK
3ZAlZWwpFHEqQ6Y7AaqqTKhebBgwspy2KHmP/eTFWQN/coTp/BuO327oa4xJG0NN
nLGG2LmP5bkjc67AVnOu+v6PHI+sbvJhToCrymhaJKQUjZ5bQbFuUHa6xPPKvfl9
dDO/PHo/UgXdUJXoIP2g70GbhKRht4Fd3bFE2LPAe9iHOHvGOo4fjnENukgmMwlY
1D2BQ395ksHS71VxAoTsAO4gDaS3FsqZlH46ugDyNPEoymzF+2p/RVxdsDoRrp3p
rtpeHtTe
-----END CERTIFICATE-----
Generated at Tue Apr 16 01:22:08 2024 by rpki-client on console-ams.rpki-client.org